mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2025-03-17 20:17:55 +02:00
omadec: check GEOB sizes against buffer size
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
parent
a10f71c1d6
commit
e74fa25cb9
@ -219,6 +219,10 @@ static int decrypt_init(AVFormatContext *s, ID3v2ExtraMeta *em, uint8_t *header)
|
||||
av_log(s, AV_LOG_ERROR, "Invalid encryption header\n");
|
||||
return -1;
|
||||
}
|
||||
if (oc->k_size + oc->e_size + oc->i_size > geob->datasize) {
|
||||
av_log(s, AV_LOG_ERROR, "Too little GEOB data\n");
|
||||
return AVERROR_INVALIDDATA;
|
||||
}
|
||||
oc->rid = AV_RB32(&gdata[OMA_ENC_HEADER_SIZE + 28]);
|
||||
av_log(s, AV_LOG_DEBUG, "RID: %.8x\n", oc->rid);
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user